Ransomware Attack Recovery

Windows 10 Professional
Dell XPS 8700

I use Acronis True Image periodically to make images of my two internal hard drives. The images are saved on an external hard drive that is only used with the network connection disabled. Otherwise the external drive is powered off.

My plan for recovery from a ransomware attack is to overwrite the encrypted data with the images. I should probably format the drive before overwriting to ensure that the ransomware is completely wiped out.

Does this plan seem viable to you? I will appreciate any comments or suggestions.

 

You can simply just restore the drive image; there's no need to format the drive.

 

Thanks for the reply.
I hope I never need this plan, but if I do, I won't format.

 

Nothing wrong with a format before a re-install......all nullptr is saying is that this is not necessary with an image restore!
Restoring a disk image overwrites all the current existing drive contents, with the image file.

If you ever need to exercise this, it would be good advice to understand where the malware originated from (how you were infected), and make sure you have either deleted the source, or don't click where you shouldn't again.
(IE rouge Email, dodgy link or download etc)